From b968543c8d621acf469a2aaab3f5e3dc42350e2d Mon Sep 17 00:00:00 2001 From: Simon Ruderich Date: Tue, 15 Jan 2013 20:56:34 +0100 Subject: [PATCH 1/1] configure.ac: Remove --param=ssp-buffer-size=1. -fstack-protector-all already protects all functions. --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index e2f5480..3da89e8 100644 --- a/configure.ac +++ b/configure.ac @@ -29,7 +29,7 @@ if test "x$GCC" = xyes; then CFLAGS="-Wno-error=int-to-pointer-cast $CFLAGS" CPPFLAGS="-D_XOPEN_SOURCE=500 $CPPFLAGS" # Additional hardening flags. - CFLAGS="-fPIE -fstack-protector-all --param=ssp-buffer-size=1 -Wformat -Werror=format-security $CFLAGS" + CFLAGS="-fPIE -fstack-protector-all -Wformat -Werror=format-security $CFLAGS" CPPFLAGS="-D_FORTIFY_SOURCE=2 $CPPFLAGS" LDFLAGS="-fPIE -pie -Wl,-z,relro -Wl,-z,now $LDFLAGS" fi -- 2.44.1